EUVD-2023-0278

Malicious code in bioql PyPI...

EUVD-2022-4289

Malicious code in bioql PyPI...

EUVD-2022-5990

Malicious code in bioql PyPI...

EUVD-2025-0174

Malicious code in bioql PyPI...

EUVD-2025-15819

Malicious code in bioql PyPI...

EUVD-2022-52617

Malicious code in bioql PyPI...

EUVD-2022-31934

Malicious code in bioql PyPI...

EUVD-2023-52105

Malicious code in bioql PyPI...

EUVD-2023-50521

Malicious code in bioql PyPI...

EUVD-2025-15998

Malicious code in bioql PyPI...

EUVD-2022-32970

Malicious code in bioql PyPI...

EUVD-2022-43762

Malicious code in bioql PyPI...

EUVD-2023-1170

Malicious code in bioql PyPI...

EUVD-2024-3216

Malicious code in bioql PyPI...

EUVD-2025-30199

Malicious code in bioql PyPI...

CVE-2025-60447

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to...

PT-2025-39905

Name of the Vulnerable Software and Affected Versions FreshRSS versions 1.26.3 and below Description FreshRSS is a free, self-hostable RSS aggregator susceptible to a flaw where a crafted page can mislead a user into executing arbitrary JavaScript code or elevating privileges within FreshRSS. Thi...

CVE-2025-10993 MuYuCMS Template Management admin.php code injection

A security flaw has been discovered in MuYuCMS up to 2.7. Affected by this issue is some unknown functionality of the file /admin.php of the component Template Management. The manipulation results in code injection. It is possible to launch the attack remotely...

CVE-2025-58384

CVE-2025-58384 affects DOXENSE WATCHDOC prior to version 6.1.1.5332. The issue is Deserialization of Untrusted Data via the .NET Remoting library used in the Watchdoc administration interface, enabling remote code execution. Impact is high (remote code execution with network access and no user in...

CVE-2025-10909

Mangati NovoSGA (versions up to 2.2.9) is affected by a Cross-site Scripting (XSS) vulnerability in the SVG File Handler, specifically via manipulation of the logoNavbar/logoLogin arguments in the /admin path. The issue can be exploited remotely; multiple sources report that the exploit is public...